On experimental procedures for entanglement verification 
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We give an overview of different types of entanglement that can be generated in experiments, as 
well as of various protocols that can be used to verify or quantify entanglement. We propose several 
criteria that, we argue, should be applied to experimental entanglement verification procedures. 
Explicit examples demonstrate that not following these criteria will tend to result in overestimating 
the amount of entanglement generated in an experiment or in infering entanglement when there 
is none. We distinguish protocols meant to refute or eliminate hidden- variable models from those 
meant to verify entanglement. 



I. INTRODUCTION 

Entanglement plays a crucial role in quantum infor- 
mation processing protocols such as quantum comput- 
ing, teleportation and quantum key distribution. For 
example, although the standard Bennett-Brassard 1984 
(BB84) protocol [l| for quantum key distribution does 
not require entanglement, it is equivalent to a differ- 
ent protocol that does use a bipartite entangled state. 
One necessary (although not sufficient) condition for se- 
curity of the BB84 protocol is that the effective bipartite 
state from the equivalent protocol is demonstrably en- 
tangled 0. It is thus reasonable to say that verifying 
experimentally created entanglement is of great impor- 
tance. However, there are many subtle issues in applying 
the theory of entanglement verification to actual exper- 
iments. These subtleties have occasionally led to con- 
troversies and misunderstandings, so that it is probably 
useful to establish some criteria for discussions of exper- 
imental protocols designed to detect, measure, or verify 
entanglement. Formulating such criteria is one purpose 
of the present paper. In addition it provides a survey of 
the many different methods that have become available in 
recent years to characterize entanglement operationally. 
We focus here on bipartite entanglement only. 

Depending on which entanglement verification proto- 
col one uses, it may still be true that the entangled states 
one has generated and verified are not useful for the task 
one had in mind. Indeed, for most tasks that require en- 
tanglement, one also must have a good estimate of the 
state itself and in which Hilbert space it lives. How- 
ever, most of the protocols we will consider here tell one 
whether there is entanglement, but not precisely what 
state one should assign. Some other protocols even tell 
one how much entanglement one generates, but still do 
not yield an estimate of the state. Those protocols then 



must be supplemented by other protocols estimating the 
state itself. Furthermore, in addition to having to know 
what entangled state one generated, one typically also 
needs a certain minimum amount of entanglement for it 
to be useful for a specific task. For example, in order to 
perform a fault-tolerant quantum computation via mea- 
surements, along the line of Gottesman and Chuang 
one needs much more entanglement than for violating a 
Bell inequality. In the present paper, though, we will be 
mostly concerned with the simplest nontrivial task of es- 
tablishing whether there is entanglement or not. That 
task may be hard enough in practice. 



A. Types of entanglement 

Let us begin with a short overview of the various types 
of (bipartite) entanglement that can be generated in ex- 
periments, and in what sort of physical systems they tend 
to occur. We distinguish three main categories that all re- 
fer to genuine entanglement, but the usefulness for quan- 
tum information processing protocols varies from one cat- 
egory to the next. 

1. A priori entanglement: Here one has a source gen- 
erating many instances (or "copies" [t^]) of a bi- 



partite state of systems A and i?. 



PAB = Pent- 



(1) 



Here we assume one has performed measurements 
on a subset of the many "copies" that allow one 
to give an accurate estimate of the state Pent- 
Then, depending on the amount of entanglement 
in Pent, the remaining unmeasured copies can be 
used for teleportation, for quantum computation, 
or for quantum key distribution. For instance, in 
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a quantum computation the entanglement should 
be within e of the maximum where e is the thresh- 
old for fault-tolerant quantum computation [1| in 
order to be useful. For a quantum repeater the 
entanglement should typically be within a few per- 
cent of the maximum 5]. This type of a priori 
entanglement can be generated, e.g., in ion traps 
where two ions can be entangled in a deterministic 
way 0, or in two- mode squeezed states of light, 
where continuous-variable entanglement is deter- 
ministically created 0, 01 1 '^^ between two atomic 
ensembles when analogous continuous-variable de- 
grees of freedom (Stokes parameters) are used Q. 

2. Heralded entanglement: Suppose one's source gen- 
erates many instances of states of the form 

PAB = PyosPont ® Pycs + PnoPuncnt ® Pno- (2) 

Here pent is an entangled state, which one has sub- 
jected to many tests so that one has a reliable es- 
timate of that state. The states pyes and pno are 
(orthogonal) states of an auxiliary system, on which 
one performs measurements that tell one whether 
one is left with the entangled state pont or the un- 
entangled (and useless) state punent- The probabil- 
ities to project onto the entangled or unentangled 
states are denoted by Pyes and p^o- 

This type of entanglement is almost as useful and as 
powerful as a priori entanglement, except that one 
may have to generate many copies before achieving 
success if Pyes is small. Indeed, one needs to gen- 
erate on average 1/pyos copies before one is able to 
make use of the entanglement. This type of entan- 
glement is generated, e.g., between atomic ensem- 
bles using the protocol from Ref. Here 
detection of a single photon that emanates from 
one of two ensembles heralds the creation of entan- 
glement between the two ensembles. 

3. A posteriori entanglement: Here one generates 
many copies of a state 

PAB = [l- P)P0+P Pent, (3) 

where P ^ 1 is a small probability, po is a state 
that one's detection device does not detect, and pcnt 
is one's desired entangled state (e.g., a state close to 
a maximally entangled Bell state) that is destruc- 
tively detected by one's devices. In this case, the 
amount of entanglement is actually small (of order 
P) but one can still detect it and one can use it for 
some but not necessarily all protocols that require 
entanglement. 

In fact, because of the destructive character of one's 
detection methods, one typically uses (and some- 
times describes [12, 13) the state pab as if it is 
close to being maximally entangled, that is, as if it 
is in fact the state Pent- But most of the time (with 



probability 1 — P) one's detectors do not register 
any signal and the protocol for which the entan- 
glement is supposed to be used fails. But upon a 
positive detection event one did succeed in imple- 
menting one's desired protocol a posteriori. This 
type of entanglement arises, e.g., in typical down- 
conversion experiments, where po is a state con- 
taining no photons, and pent contains a pair of pho- 
tons, one photon for each party. (We neglect here 
the probability of order P^ to have two pairs of 
photons, p2p. This is a good approximation only 
when considering a single copy of the state pab, 
but not when one considers two copies or more. 
After all, to order P^ one has not only two copies 
of Pent but there are also terms corresponding to 
the case where one has one copy of po and one of 
P2p. See [13] for examples.) Such entanglement can 
be useful for generating classical data displaying 
nonclassical correlations, but not always for gener- 
ating quantum outputs. For example, a posteriori 
entanglement can be used for Bell inequality tests 
[Tsl . [Tsj . The main difference between a posteriori 
entanglement and heralded entanglement is that in 
the latter case the entangled state pent exists after 
one's measurement, ready to be used, while in the 
former case the desired state pont never exists with 
a high fidelity (since P ^ 1). Before one's measure- 
ment one has pab, after one's measurement one has 
destroyed the state. 

On the other hand, one can in principle promote a 
posteriori entanglement to heralded entanglement 
by using two copies of the state and applying en- 
tanglement swapping p^ . That is, conditioned on 
detecting two photons, one from each copy, and 
projecting those two photons in a Bell state, one 
has to a very good approximation another pair of 
propagating photons that should be close to the 
desired maximally entangled state. We would not 
actually agree with the name "entanglement swap- 
ping" here as that term would imply one starts off 
with a close to maximally entangled state, whereas 
one does not. Moreover, in the actual experiment 
fl^l the detection of two photons in the Bell mea- 
surement could be due (with roughly 50% probabil- 
ity) to two photons from one mode (arising from the 
term p2n mentioned above). So, with the method 
of [Ijl one actually produces a roughly equal mix- 
ture of a close-to-maximally entangled state of two 
photons, and a state with no photons in one output 
and two (unentangled) photons in the other. For a 
more precise and detailed discussion of this issue, 
see 

B. Overview of entanglement verification protocols 

We can also distinguish various entanglement verifica- 
tion protocols. We briefly discuss them here in no partic- 
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ular order (except for being treated in this order, much 
more extensively, in the next Sections), and also indicate 
what type of not-so-subtle errors have been made in ap- 
plying these verification protocols (more subtle errors are 
discussed later): 

1. Teleportation: Here one tries to use entangled 
states to teleport some ensemble of quantum states. 
If the average teleportation fidelity is sufficiently 
high, one has proven the existence of entanglement 
(for more details see Section llll| . 

Just as there are different types of entanglement, 
there are different types of teleportation. With a 
priori entanglement one can in principle perform 
deterministic and unconditional teleportation, pro- 
vided one can perform a Bell measurement in a 
deterministic way. That is, one can guarantee that 
the quantum state of a given system will be tele- 
ported with high fidelity and high probability. This 
type of teleportation_has been achieved both with 
181 as well as with two- mode 
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ions in an ion tra" 
squeezed states [i 

With heralded entanglement one can do the same 
(after a successful heralding event), but with a pos- 
teriori entanglement one can only perform condi- 
tional teleportation. That is, the success of the 
teleportation protocol cannot be guaranteed in ad- 
vance. The success is conditioned on the positive 
outcomes of certain measurements, including the 
Bell measurement, that are part of the teleporta- 
tion protocol itself. For example, in the pioneer- 
ing experiment of Ref. [2l[ successful teleportation 
could be inferred only after a succesful Bell mea- 
surement, and after detecting and destroying the 
teleported state. We may call this conditional a 
posteriori teleportation. The improved version p!3 | 
of teleportation with a posteriori entanglement of 
Ref. [24I no longer relies on having to detect and 
destroy the teleported state. That type of telepor- 
tation is still conditional, success being conditioned 
on the positive outcome of the Bell measurement. 

In the context of the present paper it is impor- 
tant to note that all these versions of teleportation 
(conditional or unconditional, a posteriori or a pri- 
ori) can be used as valid entanglement verification 
tests. In order to quantify the amount of entangle- 
ment generated one does have to take into account 
in what fraction of the attempts successful telepor- 
tation was achieved. But a sufficiently high fidelity 
in the successful cases does demonstrate the pres- 
ence of entanglement. 

2. Bell-CHSH inequality tests: Here one subjects the 
entangled states to measurements whose correla- 
tions may turn out to be so strong that they 
cannot be exp lained by a local hidden-variable 
model [H, This, in turn, implies entangle- 

ment, as any unentangled state could act as a local 



hidden-variable model. Null results, where no sig- 
nal was detected, may be taken care of by a "no- 
enhancement" or a "random-sampling" assumption 
(see Section HVl for more details). Thus, any of the 
three types of entanglement described above can be 
tested and verified by a Bell-CHSH [t^ inequality 
test. 

The Bell-CHSH test is very powerful in that it 
makes no assumptions about Hilbert spaces in- 
volved, nor about what one's measurement devices 
actually detect. On the other hand, the amount of 
the violation of such an equality by itself tells one 
nothing quantitative about the amount of entan- 
glement generated in the experiment. For exam- 
ple, in the case of a posteriori entanglement there 
is a clear difference between pab and Pont- The 
violation of Bell's inequality tells one only about 
the nonzero entanglement in pent but not about the 
entanglement in the state actually generated, pab- 
Including the fraction of null results does give one 
the correct order of magnitude of entanglement in 
PABi but typically one does not include these in 
statements about entanglement [25]. 

3. Tomography: One performs full tomography (t^ 
on a quantum state and from that infers, by cal- 
culation, how much entanglement one has. This 
seems straightforward, but one has to be careful 
here. In the case of a priori entanglement the state 
one performs tomography on, pent, actually is the 
state generated in one's experiment, pab- In the 
case of a posteriori entanglement one typically per- 
forms tomography not on the full state, but only 
on the part that is detected, p^nt- That state pcnt 
never exists independently in one's experiment, and 
conclusions based on that state overestimate the 
amount of entanglement in pab by a factor of 1/P. 
For example, although a graph as in, e.g., (l3j on 
tomography of a state generated by down conver- 
sion, looks similar to a graph in a tomography ex- 
periment on an entangled state between two ions 
|27| . only the latter experiment performed tomog- 
raphy of the full quantum state. 

4. Entanglement witnesses: One measures a particu- 
lar observable whose expectation value is positive 
for any unentangled state [HI . If one finds a nega- 
tive value, one must, therefore, have entanglement. 
Null measurements can be counted as contributing 
"zero" to the entanglement witness, and, therefore, 
do not affect the sign of the entanglement witness. 
Thus, measuring an entanglement witness is a valid 
test for all three types of entanglement discussed 
above. 

5. Direct measurement of entanglement: Here one 
measures certain quantities that not only tell one 
there is entanglement, but also how much. This 
requires one to have multiple copies of the same 
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state [29|, |30|, |3l|. However, what one means pre- 
cisely by "multiple copies" or "identical copies" is 
not trivial. Placing too much trust on having iden- 
tical copies without testing this first can lead one 
to wrong predictions about entanglement. A simple 
example is [s^ where measurements are performed 
on only one part of a bipartite state, and yet max- 
imal entanglement is concluded to exist. Here one 
relies on the strong additional assumption that one 
generated two identical pure states. For more de- 
tails, see Section IVHl 



6. Consistency with entanglement: Here one's (ideal) 
theory tells one the experiment should, if all goes 
well, generate some entangled state pent- One per- 
forms certain measurements and checks that one's 
measurements are consistent with the assumption 
of the entangled state Pcnt- However, in general 
one cannot infer the existence of entanglement from 
these measurements and the measurement results 
will typically be consistent with a classically cor- 
related but unentangled state as well. A recent 
example of this procedure is [s^ (see also [33|). 

In the remainder of this paper we will be concerned with 
the correct entanglement verification protocols 1-5 only, 
and we exclude protocol 6 (it does feature in Section 
IVHl because a particular incorrect application of proto- 
col 5 is similar to protocol 6). Nevertheless, even correct 
protocols must be applied carefully, and discussing the 
most common mistakes in applying correct protocols is 
one point of the present paper. Those errors tend to be 
more subtle than the ones we just mentioned in this brief 
overview. 



C. The different roles played by the 
experimentalist 

It will be convenient in the following discussions to in- 
troduce five characters playing different roles in experi- 
ments that generate and verify entanglement. First there 
are the usual personae Alice and Bob who claim to have 
generated a bipartite entangled state shared between the 
two of them. Alice and Bob are in separate locations A 
and B. 



Then there is Quinten 75| who wishes to verify that 
Alice and Bob have indeed generated entanglement. We 
assume Alice and Bob hand over their entangled state to 
Quinten, who then subjects that state to his favorite test 
(and this is repeated many times). Quinten believes in 
quantum mechanics but does not trust Alice and Bob. 

Quinten should be distinguished from another verifier, 
Victor, who was introduced some time ago in the litera- 
ture [al in the context of teleportation protocols. Victor 
lets Alice and Bob teleport a state that he hands over to 
Alice. The state is known to Victor, but not to Alice and 
Bob. Victor checks whether the output state on Bob's 
side at the end of the teleportation protocol is sufficiently 



close to his original input state to warrant the conclu- 
sion Alice and Bob must have made use of entanglement 
(more details are given in Section lllljl . In contrast to 
Victor, Quinten performs all tests himself. In particular, 
if Quinten uses teleportation as a means to verify entan- 
glement, he himself would try to teleport some arbitrary 
state using the entangled state handed to him by Alice 
and Bob. 

Finally, there is Rhiannon 76], the realist, who, just 
like Quinten, mistrusts Alice and Bob and performs her 
own measurements on states handed over to her by Alice 
and Bob. But unlike Quinten, she does not believe in 
quantum mechanics and tries to construct a local ("re- 
alistic") hidden- variable model that describes her mea- 
surement results. She does not accept any quantum- 
mechanical descriptions of (measurement or other) de- 
vices and interprets results of measurements only in 
terms of the classical settings of those devices and in 
terms of the different "clicks" her measurement devices 
produce. 

In the following we will be mostly interested in ver- 
ification procedures that could convince Quinten that 
Alice and Bob share entanglement. This preference re- 
flects our own belief in the validity of quantum mechan- 
ics. Quinten's protocols do not test quantum mechanics; 
they merely test the state handed over to him by Al- 
ice and Bob. Such protocols do not necessarily convince 
Rhiannon of anything, as she will not accept any of the 
inferences made by Quinten that depend on the validity 
of quantum mechanics. 

On the other hand, protocols designed to convince Rhi- 
annon that Alice and Bob's measurement results cannot 
be explained by a local hidden-variable model, are per- 
fectly acceptable as a demonstration for Quinten that 
Alice and Bob made essential use of entanglement. This 
is simply because any unentangled state can itself be used 
as a local realistic hidden variable model. Moreover, such 
an experiment may convince Quinten of entanglement 
even if it fails in Rhiannon's eyes. Indeed, the presence of 
"loopholes" in Bell-inequality tests or CHSH-inequality 
tests [IHl make the test unacceptable for Rhiannon, but 
Quinten is willing to make more assumptions about the 
experiment (see below for examples). Thus he may ac- 
cept the violation of a Bell or CHSH inequality as veri- 
fying the presence of entanglement even if loopholes are 
in fact present. An explicit example demonstrating that 
using more assumptions allows one to relax the condi- 
tions under which entanglement is verified is provided by 
Ref. 36] , where a more relaxed Bell inequality is derived 
under additional assumptions about the (quantum) de- 
scription of the measurements performed. It is important 
to distinguish these assumptions about quantum mechan- 
ics made by Quinten from other assumptions that would 
boil down to trusting Alice and Bob. The latter, we ar- 
gue, should not be allowed in entanglement-verification 
experiments. 

Thus we propose that every entanglement-verification 
protocol follow Quinten's criteria and assumptions. In 
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the next section we will formulate some Criteria that 
Quinten should use (mostly arising because of his mis- 
trusting Alice and Bob). In the subsequent sections we 
will discuss examples of assumptions often made in ex- 
periments that do not violate these Criteria, examples of 
assumptions that do violate them, and what the conse- 
quences are of such violations. 



D. What is entanglement verification anyway? 

We conclude this Introduction by defining what exactly 
we mean when we say we verified that a source creates 
bi-partite entangled states. This question is meaningful 
only in the situation that the source emits a long sequence 
of repeated signals. It is not clear in general that we 
can describe this situation via density matrices for the 
individual signals. However, in special cases this can in 
fact be done. 

The answer to the question what state to assign un- 
der which circumstances has been given in j37| for the 
following case, relevant to our discussion. Assume Al- 
ice and Bob generate N copies of their bipartite state. 
Then consider the case in which Quinten tests some ran- 
domly chosen subset of N < N copies. Suppose he con- 
cludes that the sequence of N copies is exchangeable, 
i.e., he assigns the same overall state to any permutation 
of these systems. Furthermore, assume Quinten con- 
siders this exchangeability to hold true for an extended 
sequence of A^-f-1 states created by adding one more copy. 
This assumption is called extendability. With both con- 
ditions of exchangeability and extendability satisfied he 
then should assign a state of the form 



P 



(4) 



with dpP{p) some probability measure, to his sequence 
of A^ copies. This form is called the De Finetti form 
[sj ■ Note that this form is more general than the simple 
relation 



P 



{N) 



®N 
Po ' 



(5) 



for A^ copies, where po is some fixed known density ma- 
trix. Indeed, the latter form is a special case of the 
De Finetti form, namely when Quinten has narrowed 
down his probability assignment P{p) to a delta function 
6{p — pq). For instance, he can achieve this by performing 
full quantum state tomography. 

More generally, Quinten's measurement statistics re- 
strict the form of those p that contribute non-negligibly 
in ([?]), and verifying entanglement means to verify that 
all contributing p's are entangled. That answers the ques- 
tion posed in the title of this subsection. 

Often one uses the statement that the density matrix 
pW Qf ]\[ systems is "of the form p'^^ = p^^" to imply 
that p is not known. In that case, one could or perhaps 
should use the more complicated form ^ to make the 



unknown character of p explicit. With this interpretation 
in mind, it is permissible to assume the form p^^^ = p®^ 
if exchangeability and extendability both hold. This is 
the case, for example, if all signals are being measured 
independently, so that the exchangeability and extend- 
ability properties apply to the classical data (i.e. the 
measurement results). 

Clearly, verifying entanglement in this sense can be 
done only with a sufficient amount of measurement statis- 
tics. The form ^ is, in fact, valid asymptotically, for 
N ~f oo, and neglects terms that vanish in the limit 
A ~> oo. The question arises how fast these terms de- 
crease with increasing A^. The discussions of those de- 
tails is beyond the scope of the present paper and for 
more discussion on that topic, see Ref. [33, [39]. But it 
is important to keep this issue in mind when making the 
statement that one's source emits entangled states. 



II. CRITERIA FOR EXPERIMENTAL 
ENTANGLEMENT VERIFICATION 

Here we propose five Criteria that any entanglement- 
verification procedure should satisfy. We illustrate how 
violating these Criteria tends to lead to overestimating 
the amount of entanglement in the entangled state gen- 
erated, or to concluding that there is entanglement when 
there is in fact none. In this Section we use one very sim- 
ple example to illustrate some of the Criteria. Suppose 
the bipartite state of two qubits one generates is of the 
form 



P 

l*(0)> 



d0 
27r 



*(0))(*(0)l; 



(|O)|l)+exp(z0)|l)|O)) 
V2 



(6) 



This state is a mixture over a phase of maximally en- 
tangled states. Yet the mixed state has no entanglement, 
which becomes clear after performing the integral over (/). 
Violating the Criteria given below, however, may lead one 
to conclude incorrectly there is entanglement. In later 
Sections we will give more complicated examples from 
actual experiments violating the Criteria in more subtle 
but equally disallowed ways. We will also display ex- 
amples in those Sections to explain why sometimes com- 
plicated procedures are required even if they may seem 
unneccesary or overcautious at first sight. 

Any experimental result must be interpreted before 
it can be checked against a theory. Whereas Rhian- 
non only translates the classical settings of devices and 
classical outcomes of measurement into symbols, Quinten 
translates measurements made by him into mathemati- 
cal expressions corresponding to von Neumann measure- 
ments or, more generally, to Positive-Operator- Valued- 
Measures (POVMs). Now in an actual experiment the 
roles of both Alice and Bob on the one hand, and that 
of Quinten on the other, are played by the same ex- 
perimentalist. Thus it is an easy mistake to accept 
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quantum-mechanical descriptions of all operations as 
valid. However, in the scenario sketched in the Introduc- 
tion, Quinten does not trust Alice and Bob. This means 
that quantum-mechanical descriptions of operations per- 
formed in the preparation procedure (the part of an ex- 
periment assigned to Alice and Bob) should not be taken 
for granted. On the other hand, measurements done dur- 
ing the verification stage (Quinten's measurements) can 
be trusted, although, of course, unjustified assumptions 
about Quinten's measurements should be avoided as well. 

Almost all over-optimistic statements about entangle- 
ment generated in actual experiments put too much trust 
in the preparation stage. Thus the first Criterion may 
well be the most important: 

Criterion 1 No assumption should be made about the 
form of the quantum state generated in the experiment. 

For example, suppose an experiment generates a state of 
the form ([5]). Now the intention may well have been to 
have full control over the phase (j). However, one should 
not simply assume one succeeded in doing that. In the 
case of (O one would prematurely conclude one gener- 
ated a maximally entangled state by assuming a particu- 
lar value of the phase, although there is no entanglement. 
Thus, we argue, verifying that one has control over the 
phase (j) should be part of the entanglement verification 
protocol. More interesting examples of violations of Cri- 
terion 1 are found in Sections IIVI and FVIII 

A special case of this Criterion, but probably worth 
stating explicitly, is 

Criterion 2 No assumption should be made about the 
symmetries of the quantum state generated in the exper- 
iment. 

Using the same example Eq. (|6l), one may well decide 
that all phases are equivalent in one's experiment "by 
symmetry" , and therefore one decides that one might as 
well set (j) to zero by fiat. This would lead, again, to the 
wrong conclusion that one generated a maximally entan- 
gled state, if one actually generated More interesting 
examples are in Section IIIII 

Another special case of Criterion [T] worth stating ex- 
plicitly refers to the form of the state of multiple copies 
of a quantum system (see also [39|). 

Criterion 3 One should not assume N copies of the 
state generated in an experiment to be in a joint state 
of the form p^^^ — j dpP{p)p®^ unless the verification 
measurements demonstrate exchangeability and extend- 
ability of the sequence of the N copies. 

This, of course, refers to the discussion about the De 
Finetti form Indeed, it is important to emphasize 
this: the assumptions of Quinten about exchangeability 
and extendability should follow from his measurements, 
not from his trusting Alice's and Bob's actions. And so 
his measurements should be done as follows: First, if he 
perform various different measurements Mi, he should 



choose a random order for those measurements on his 
copies to ensure he can apply exchangeability. Second, in 
order to warrant the extendability assumption, he should 
be able to delete randomly chosen subsets of his data and 
still reach the same conclusion about his state assign- 
ment (or about entanglement). These two Criteria are 
sufficient for him provided all his measurements Mi are 
performed on single copies. In the case that some or all of 
his measurements are performed jointly on groups of two 
or more copies, then he should in addition choose those 
groups of copies randomly. Examples of where these pro- 
cedures are necessary will be given in Section [VIIl about 
direct measurements of entanglement. 

Let us note explicitly that Quinten will assign correctly 
the form p'^^^ = / dpP{p)p^^ to verify entanglement 
even in cases where one might normally be inclined to 
assign a different form. For instance, a phase-diffusing 
laser emitting light pulses in subsequent time slots can 
be described by a quantum state of a slightly different but 
related form [40|, that takes explicitly into account that 
different portions of the laser light within a coherence 
length of the laser differ only slightly in phase, whereas 
two portions farther apart in time may have very dif- 
ferent phases. That description, however, makes use of 
extra knowledge about how a laser actually works. Quin- 
ten, however, will trust only his measurement results and 
should make no assumptions about how Alice's and Bob's 
lasers work. 

For our next Criterion, we argue that the way the ver- 
ification test is performed in the experiment should not 
depend on how the actual state is generated. If the same 
state can be generated in different ways, then Quinten's 
verification procedure should not depend on which of the 
possible methods was used by Alice and Bob. Thus, we 
have another Criterion: 

Criterion 4 Entanglement verification should be inde- 
pendent of the entanglement generation procedure, except 
for the sharing of stable classical resources. 

For example, suppose again ^ is generated. Assume 
that the reason for integrating over all (j) is that one does 
not have control over the phase from run to run because 
some optical path length is unstable. However, suppose 
that within one run one can be quite sure that the ver- 
ification process still can make use of almost the same 
optical path length, whatever it is. In that case the ver- 
ification measurements from run to run would give the 
wrong impression that phase is under control, and again 
one would overestimate the entanglement in the state 
This same example is discussed further in Section |V] for 
an actual experiment. 

We do allow here the sharing of classical resources be- 
tween Alice and Bob on the one hand, and Quinten on 
the other. Such resources may act as reference frames 
(we do allow Quinten to use the same fixed stars as ref- 
erence frame) or placeholders (we do allow Quinten to 
use the same ion trap in which entangled ions are stored, 
or the same optical table, or indeed the same lab.) 
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A critical case on the borderline between classical and 
quantum resources is the sharing of lasers (used a phase 
reference, for example) between Alice and Bob on the one 
hand, and Quinten on the other. In principle, Quinten 
should use his own laser to verify entanglement. After 
all, he should not trust Alice and Bob to have used a sta- 
ble laser. However, suppose Alice and Bob use a laser to 
generate entanglement whose phase drifts over a charac- 
teristic time scale At. Suppose further that the time At 
is sufficiently long to in principle verify the stability of 
that laser with respect to some standard phase reference 
to some relevant accuracy. As a shortcut Quinten could 
use, in such a case, the same laser to verify entanglement, 
instead of phase locking his own second stable laser to it 
and then using the second laser to perform the verifica- 
tion. Thus, although using two independent lasers is safe 
and correct, we would argue that it is permissible some- 
times (for the sake of practicality) to use the same laser 
during generation and verification, but only if that laser 
is sufficiently stable, namely on a time scale sufficiently 
long to measure the phase of the laser relative to some 
phase standard. Of course, it is up to Quinten to ver- 
ify this. Quinten does not just assume anything about 
the stability of Alice's and Bob's laser, he does have to 
subject it to his own independent test. 

Finally, we formulate a Criterion about postselection, 
which is well-known to cause troubles for Bell inequality 
tests 41j]. This Criterion does not refer to Alice's and 
Bob's procedures but to Quinten's analysis of his own 
measurement results. 

Criterion 5 Apply postselection only if it can be simu- 
lated by local filtering before and independent of the ver- 
ification measurements. 

Here, "local" refers to operations that are done separately 
on Alice's side and Bob's side; it excludes nonlocal oper- 
ations acting jointly on Alice's and Bob's quantum sys- 
tems. That is, Quinten is allowed to apply certain types 
of postselection, but only if the subensemble he selects 
is the same as the subensemble that would be selected 
if Alice and Bob had applied local (filtering) operations 
in their preparation before Quinten's measurements. 
That filtering then should in particular be independent 
of both the choice and the outcomes of Quinten's mea- 
surements. The reason for all this is as follows: A local 
operation cannot increase the average amount of entan- 
glement. That is, given a state pab that is generated in 
some experiment, one has 

E{pab) > Ppass £'(ppass) +Pfail£'(pfail), (7) 

where E{.) is one's favorite measure of entanglement, 
Ppass is the probability for the local filtering operation 
to succeed, and Ppass is then the density matrix of the 
subensemble selected by Quinten. pfaii is the subensem- 
ble failing the filtering, and hence thrown out by Quinten. 

Postselection applied in this way cannot lead one to 
believe there is entanglement where there is none. But 
one can certainly still overestimate the entanglement one 



generated by misidentifying ppass with the ensemble pab 
actually generated in the experiment. This is an error we 
mentioned before, in the context of a posteriori entangle- 
ment. 



III. QUANTUM TELEPORTATION 

One way for Quinten to test whether Alice and Bob 
generated entanglement, is for him to try to use the pur- 
ported entanglement for teleportation. Of course, tele- 
portation achieves more (and was designed to achieve 
more) than merely verifying entanglement, but here we 
are interested in teleportation only as a means of veri- 
fying entanglement. In particular, when one wishes to 
use teleportation for a quantum repeater |^ or for quan- 
tum computation [3] one will need more stringent criteria 
on the fidelity of teleportation than we require here for 
our limited purposes. We consider teleportation of both 
qubits and continuous-variable (CV) states, i.e. states of 
bosonic modes. 

If Alice and Bob claim to be able to generate 2-qubit 
entangled states, Quinten may try to verify this by tele- 
porting a qubit prepared in an arbitrary state from Al- 
ice's location A to Bob's location B. If he finds he can 
teleport randomly chosen qubit states with a "sufficiently 
high fidelity" , then he can be confident Alice and Bob 
prepared a state that is sufficiently close to an ideal Bell 
state to warrant the conclusion the state has nonzero en- 
tanglement. Similarly, in the CV case, he may try to 
teleport an arbitrary state of a given bosonic mode from 
A to B. Again, if the fidelity Quinten finds is sufficiently 
high, he concludes Alice and Bob did generate a CV- 
entangled state. 

Now before discussing in more detail what "sufficiently 
high fidelity" really means, let us compare Quinten's pro- 
tocol with a related but different verification protocol, 
namely one that verifies whether Alice and Bob can do 
teleportation themselves. This is usually checked by Vic- 
tor who hands a randomly chosen qubit state over to 
Alice, who then teleports it to Bob, after which Victor 
checks, again, the fidelity of the state teleported with 
respect to the known (to him) original. There is a dis- 
tinction we can make between the verification protocols 
of Quinten and Victor. The difference concerns the use 
of a shared reference frame between Alice and Bob. In 
some cases (in fact, this applies more to the continuous- 
variable case), the shared reference frame may be consid- 
ered an additional quantum channel [i^ . While we actu- 
ally do not agree with this point of view (iol . H . |45| . [i^ , 
Victor may not be happy about Alice and Bob sharing 
such a resource as it may seem Alice can cheat by send- 
ing Bob directly the state she's received from Victor. 
However, this can in principle be circumvented by let- 
ting Ahce and Bob estabhsh the resource prior to Victor 
handing over his qubits to Alice. On the other hand, it 
should be clear that Quinten is allowed to use whatever 
reference frame he needs to establish an isomorphism be- 
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tween Alice's and Bob's qubit Hilbert spaces [47||. So in 
the present context there is no problem about sharing 
reference frames during teleportation. 

Quinten (and similarly, Victor), uses the following pro- 
cedure: first he chooses some test ensemble of pure states 
and associated probabilities 

test ensemble = , Pi) , i — 1 . . . N} (8) 

of either qubit states or CV states to be teleported. These 
states are to be tested in some random order. Then he 
calculates how well he could reproduce the state on Bob's 
side on average by simply measuring the input state and 
generating a new state in B dependent on the measure- 
ment outcome: in quantum key distribution (QKD) this 
procedure would correspond to an "intercept-resend" at- 
tack. The average fidelity F he finds using the state Al- 
ice and Bob provided should be larger than the optimum 
value F (given the test ensemble) the intercept-resend 
attack could produce, because with a separable state one 
would not be able to do better than that particular limit. 

Now F does depend on the ensemble chosen by Quin- 
ten. The obvious choice would be to use the uniform 
ensemble over all possible states. In the qubit case this 
gives the result that F = 2/3 [i^. But Quinten cannot 
possibly test all possible states, and a smaller set of test 
states will in general lead to a higher value of F. For- 
tunately, one can show [HI for the qubit case that there 
are simple ensembles consisting of four or six states that 
lead to the same optimum fidelity of 2/3: one set is the 
set 

T={(|T,),p, = l/4),i=1...4} (9) 

of four tetrahedral states on the Bloch sphere. The other 
is the set 

M={(|M,),p, = l/6),i = I...6} (10) 

of the six mutually unbiased basis states. Such sets then 
are eminent candidates to use for verification of entan- 
glement by teleportation • 

One may wonder at this point, though, why is it 
not sufficient to check just one state or perhaps two 
states? After all, Quinten knows he is not performing 
the intercept-resend method, so why should he pretend 
he has to beat that particular limit? One answer is that 
in the case the state generated by Alice and Bob is in fact 
separable, Quinten's procedure can be interpreted as an 
intercept-resend protocol. The other answer is, Quinten 
cannot assume that the fidelity for one or two particu- 
lar states is representative for the fidelity of the whole 
ensemble. Indeed, there may well be an asymmetry in 
the state generated by Alice and Bob that would lead to 
teleporting certain states much more reliably than others. 
Quinten would be violating Criterion [5] by assuming oth- 
erwise. The only guarantee Quinten needs is that choos- 
ing the two ensembles mentioned above cannot lead to 
an average fidelity larger than 2/3 if he has a separable 
state, independent of assumptions about the entangled 



state generated by Alice and Bob. On the other hand, 
it is still true he may choose a smaller or different set of 
test states, but then the fidelity to beat will in general 
be larger than 2/3. 

Similarly, suppose it is obvious from the experimen- 
tal arrangements that the teleportation fidelity of any 
state of the form |0) -I- exp(i(/))|l) is independent of the 
phase (j). Can't Quinten then make a shortcut and test 
only one state out of the ensemble M of that form (that 
ensemble contains four such states, after all) and use 
F = 2/3 as threshold? The answer is again negative, 
as it would violate Criterion[2l although Quinten's setup 
may well be symmetric under phase shifts, he cannot as- 
sume the state generated by Alice and Bob has the same 
symmetry. For example, in a teleportation exper- 
iment is discussed where only four out of six mutually 
unbiased basis states were tested. In principle that is 
not sufficient, although the actual experiment may well 
have possessed the desired symmetry. There is indeed 
an intercept-resend attack that reproduces all four mu- 
tually unbiased basis states tested in [l8| with a fidelity 
of F = 0.77 by using appropriately constructed POVMs 
[50| , beating the experimental teleportation fidelity of ap- 
proximately F « 0.75. So the simple correct thing to do, 
independent of one's assumptions about how the experi- 
ment works in detail, is to use all four tetrahedral states 
T or all six mutually unbiased basis states M to estimate 
the teleportation fidelity and try and beat F = 2/3. 

In the CV case choosing an arbitrarily large set of 
states {N — > oo in ([8])) to be tested for teleportation 
would lead to an optimum intercept-and-resend fidelity 
-F = 0, owing to the infinite dimensionality of the rele- 
vant Hilbert space. And so it is true that Quinten's task 
is easy, in principle, to verify CV entanglement. Unfor- 
tunately, though, arbitrary states are typically not Gaus- 
sian (described by a Gaussian Wigner function) and non- 
Gaussian states are in general much harder to generate 
for Quinten. What has been used as a test ensemble in- 
stead is to take a particular subset of Gaussian states, 
namely the set of coherent states. Then a fidelity of 
F = 1/2 can be reached by the intercept-resend attack 
[sH . There have been other proposed tests tak- 
ing the same set of coherent states, but using different 
criteria. Those criteria, however, do not check for entan- 
glement but for something stronger [s^. For instance, 
one may wish to eliminate hidden- variable models for the 
teleportation protocol. But in order to convince Quinten 
no such strong measures are needed. In fact, in the sub- 
section below we will see that Rhiannon will not be con- 
vinced by a demonstration of high-fidelity teleportation 
in any case. 

In principle then Quinten would have to test "all" co- 
herent states if he is to use F = 1/2 as threshold. Since 
that is impossible he would instead draw randomly from 
the set of coherent states (varying phase and amplitude 
randomly) and teleport those and measure the average 
fidelity. On the other hand, small test sets of (nonorthog- 
onal) coherent states may well be sufficient too, provided 
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Quinten beats the correct fidelity limit F (some number 
larger than 1/2 but less than 1). 

In S] it is again Criterion [2] that was violated by not 
taking into account the complete set of coherent states 
that were in fact teleported experimentally for the esti- 
mation of the fidelity. Namely, the fidelity was estimated 
using the teleportation of one particular coherent state, 
namely the vacuum. Note that later more general states, 
squeezed states in particular [s^ . were teleported with 
fidelity > 1/2. 



A. Teleportation and hidden variables 

There are two interesting issues concerning the relation 
between hidden- variable models and the use of entangle- 
ment in teleportation. 

First, there is the question whether a local realistic 
hidden-variable model exists for the teleportation proto- 
col. Thanks to the result of [11] we know now that one bit 
of classical information suffices to simulate spin-spin cor- 
relations of a maximally entangled 2-qubit state. This, 
as explained in [5^, can be exploited by Alice and Bob 
to mimic a teleportation protocol by making use of the 2 
classical bits that Alice is supposed to send to Bob. How- 
ever, neither Victor nor Quinten will be fooled by this: 
Victor not, because he will check the fidelity of the state 
on Bob's side himself; Quinten not, because he performs 
the whole teleportation protocol himself. 

Somewhat similarly, in the case of teleportation with 
two- mode squeezed states Q , all measurements (namely, 
quadrature measurements) and states (Gaussian states 
only) featuring in that protocol can be described by a 
positive Wigner function, which can act as a hidden- 
variable model [56]. Again, this is of no concern to 
Quinten: for him it is sufficient that the only consistent 
quantum description of the experiment requires entan- 
gled states. In particular, his predictions about measure- 
ments on the teleported system other than measurements 
of quadrature variables would be different from those of 
any hidden- variable model. 

Second, it is known that the so-called Werner states 
Wa [13] of two qubits for certain ranges of the parameter 
a are entangled (for a > 1/3) but do admit a hidden- 
variable model for von Neumann measurements on the 
qubits (for a < 1/2). Moreover, one can achieve telepor- 
tation of qubits with the state Wa for a = 1/2 and reach 
a fidelity of F = 3/4, thus beating the limit of = 2/3, 
as shown in [1^. So in this case, too, Quinten and Vic- 
tor would conclude there is entanglement in that case, 
although Rhiannon could find a hidden-variable model. 
It may be worth repeating that even though there is no 
hidden-variable model according to the criteria of [ssj 
when the teleportation fidelity is larger than F « 0.85 
(namely when a > 1/ v^) , Rhiannon probably would 
still not agree with that conclusion as she may exploit 
the two classical bits sent from Alice to Bob to construct 
a hidden- variable model, along the lines of (55| . 



IV. BELL AND CHSH INEQUALITIES 



The underlying asumptions behind Bell and CHSH in- 
equalities have been discussed at length and need no re- 
peating [H,!!^]. Nevertheless, we wish here to connect 
those discussions to the Criteria formulated in Section 
2. In particular, many discussions [ssl ] center around 
so-called "loopholes" : the two most important ones are 
the detection (or fair sampling) loophole, and the local- 
ity loophole. Although both loopholes have been closed 
in separate experiments [isl . [59| , there has not been an 
experiment in which both were closed at the same time 

The detection loophole concerns the simple fact that in 
an experiment not all experimental runs lead to detector 
clicks, due to inefficiencies in the detectors (losses in the 
transmission of quantum states from Alice to Bob are 
part of the generation procedure). What one assumes 
is that it is a random subset of events that is detected. 
This assumption does not violate any of the Criteria we 
proposed in Section 2. Indeed it is an assumption about 
Quinten's measurement devices, not Alice's and Bob's. 
Thus Quinten is justified in accepting that assumption, 
although Rhiannon would not agree. It is assumed here 
that Alice and Bob do not know which device settings 
Quinten is going to use, which Quinten must guarantee 
by choosing his settings randomly. 

The locality loophole concerns the timing of the choice 
of different measurements that have to be performed on 
the two systems of the bipartite entangled state. If a 
Bell inequality test is to refute a local realistic theory, 
the two measurements themselves and choosing the set- 
tings of the two measurement devices must be separated 
by a space-like interval. Most experiments violate that 
condition but for Quinten's purposes violating locality is 
not against the Criteria of Section 2. It is an assumption 
about his measurements, not Alice's and Bob's. And so 
this loophole is not relevant for him, although it is cru- 
cial to Rhiannon. Indeed, Quinten does not even have 
to make an active choice of settings. This also relates 
then to another aspect of testing local realism, namely 
that of free will of the experimentalist. Rhiannon has 
to assume free will on the experimentalist's part (other- 
wise the derivation of Bell or CHSH inequalities fails). 
This implies that an active choice of measurements must 
be made according to Rhiannon. A passive choice of 
measurements, for instance determined by a beamsplit- 
ter that splits the incoming signal either to one measure- 
ment setup or another, is unacceptable for Rhiannon. In 
contrast, for Quinten both passive and active choices of 
different measurements are fine, as long as he believes his 
active choices are permutation invariant (for applying the 
De Finetti theorem (O). 

In short, then, closing loopholes is not important for 
entanglement verfication, no matter how crucial it is for 
refuting local realistic hidden-variable models. 
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A. Dangers of postselection 

In many experiments on polarization entanglement be- 
tween two photons generated from down conversion, it is 
common to take into account only those data where two 
(or more) photons were detected, (at least) one on each 
side A and i?, and ignore the null results where photons 
were not detected on both sides. For Quinten this is a 
correct procedure, one reason being it relies only on the 
fair-sampling assumption. Another way to see that this 
procedure is correct, is to note it can be simulated by a 
local filtering operation. We may imagine on each side 
independently a polarization-independent lossy channel, 
then a quantum-non-demolition (QND) measurement of 
photon number, and filtering out those cases where no 
photons are found. Here one would use the relation 

E{pab) > PllE{pii) +PnuuE{pnull), (H) 

in obvious notation. So postselection correctly identi- 
fies the presence of entanglement. On the other hand, 
violating a Bell inequality by many standard deviations 
still does not say much about how much entanglement 
is generated in the experiment, E{pab)- If the probabil- 
ity of successful measurements is small, say pu — e, one 
may conclude only that the entanglement is of order e, 
namely eE{pii), in contrast to statements in Ref. [25l |. 
and in many other papers. The state that may be close 
to maximally entangled is the fictituous state pn that 
would be produced if one actually performed the above- 
mentioned QND measurement of photon number. 

In other types of experiments the seemingly similar 
postselection of keeping only data corresponding to de- 
tector click fails [13, E^]- Suppose one intends to generate 
an entangled state of the form 

(|O)|l)+exp(z0)|l)|O))/\/2, (12) 

where now and 1 refer to photon numbers in two differ- 
ent modes, one in location A, one in B. Measurements on 
that state will not always yield one photon in total due to 
inefficiencies. So, why not just ignore the zero-detection 
results? One reason is that filtering states with 1 photon 
in total is a nonlocal filter, unlike filtering 1 photon on 
each side. Indeed, if one instead had generated a product 
state of the form 

(|0)+e|l))(eexp(z</.)|l) + |0))/2, (13) 

with e ^ 1, filtering out zero-detection events would 
make this state indistinguishable from the entangled 
state (|T2|) (if we also neglect the double-detection events 
arising from the e^|l)|l) term), as was pointed out in ^6d\ . 

Alternatively, one may also view this as a violation of 
Criterion [U as the verification protocol of [s^l assumes 
a single-photon state was generated, explicitly excluding 
the |1)|1) and |0)|0) terms by fiat. So, no entanglement 
between two atomic ensembles can be inferred from the 
data presented in [sij . 



V. QUANTUM TOMOGRAPHY 

If Quinten performs tomography on the quantum state 
generated by Alice and Bob, he obviously will not only 
determine whether the state is entangled but also by how 
much. However, in general one does not perform a full to- 
mographic reconstruction of a state, but instead focuses 
on the subspace or subsystem of interest. For example, 
when testing entanglement between the spin degrees of 
freedom of two electrons, no one would think of also map- 
ping out the spatial degrees of freedom of the electrons. 
Fortunately, ignoring one degree of freedom is easy to 
justify: tracing out a degree of freedom is a local opera- 
tion and can only decrease the amount of entanglement 
one estimates. 

It is a trickier question whether Quinten is allowed to 
single out some Hilbert subspace Ti. on which to perform 
his measurements. Indeed, the example treated at the 
end of the preceding Section is one where singling out a 
particular subspace is incorrect. Moreover, according to 
Criterion [1] he should not make any assumptions about 
the state: How can this Criterion be reconciled with the 
choice of a particular Hilbert space? 

The answer is this: if one can show that the over- 
all entanglement in the state generated by Alice and 
Bob cannot be less than that present in the subspace 
Ti. then, of course, Quinten's test can only underestimate 
the amount of entanglement. The most straightforward 
way of accomplishing this is to make sure that project- 
ing onto the subspace is a local filtering operation. 
This is indeed a method often used, although the restric- 
tion to a particular Hilbert subspace is not always made 
explicit. For example, tomography on "photon pairs gen- 
erated by down conversion" is typically restricted to the 
Hilbert space where the number of photons is fixed to 
two (one on Alice's side, one of Bob's side) [l^. Down 
conversion in fact generates a mixture of the vacuum, 
photons pairs, double photon pairs, etc. For the ques- 
tion whether there is entanglement or not, tomography 
on the restricted Hilbert space only is indeed sufficient, 
although for quantitative estimates of entanglement it 
fails. (Let us also note there are experiments in which 
tomography is performed on a larger Hilbert space, in- 
cluding the vacuum component as well as components 
containing photons [Slj.) 

Let us here also expand on the example mentioned in 
the Introduction. In [10| tomography is applied to a sub- 
space of the full Hilbert space of two field modes. (The 
assumption of only two field modes, one on each side, is 
warranted as ignoring information about what field mode 
produced a click in one's detectors is a local operation.) 
In that experiment, there is a phase between the two 
states |0)|1) and |1)|0) that depends on an optical path 
length. That path length in the actual experiment was 
controlled and stabilized. Here, as always, one really 
means that the phase is stabilized with respect to some 
external reference, so that one really should write (p — ipR- 
Now the tomographic measurements depend on a simi- 
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lar phase cj)' — determined by a different optical path 
length. The procedure of [10] made a point of not using 
the same optical path for tomography and entanglement 
generation, so as not to violate Criterion H) 

Indeed, suppose that both phases would be drifting 
over time. Then one could eliminate the relative phase 
drift of (0 — 4>r) — (</>' — i'R) = ~ by using the same 
optical paths, thus reducing the requirements on phase 
stabilization. That is, although neither (j) — (pn would be 
well-defined, nor (j)' — 4>ii, the difference 4i—4>' would drift 
over a much longer time scale. However, that procedure 
would violate Criterion[3]as the verification would depend 
on the generation procedure. And this would have led to 
premature conclusions about entanglement. 

Finally, let us note that assuming the De Finctti form 
(III) is a crucial (albeit often not explicitly noted) par t 
of standard quantum tomography, as explained in [37[. 
As a consequence Criterion |3] is usually obeyed in such 
experiments. 



VI. ENTANGLEMENT WITNESSES 

Entanglement witnesses are operators W on bi-partite 
Hilbert spaces such that the observation of Tr(pPF) < 
implies that p is an entangled state. Conversely, for each 
entangled state p there is a witness. Any witness operator 
can be represented as = J2ij'^ij^i ® where Ci 
are real numbers, not necessarily positive, and the sets 
of operators {Fi} and {Gj} are POVMs on Alice's and 
Bob's Hilbert spaces, respectively. Then the expectation 
value of the witness can be evaluated from the observed 
probabilities = TT{pFi'^Gj) as Tr(pM^) = CijPij. 
Thus an entanglement witness can always be measured 
by local measurements. 

Before looking at some examples, let us make some 
brief general remarks. The POVMs on either side do 
not need to form an operator basis (i.e., to be tomo- 
graphically coniplete) in order to construct useful wit- 
ness operators [2]. In general we assume that Quinten 
has full knowledge about the POVMs he performs. How- 
ever, this is not necessary. For instance, there is no im- 
plication that Alice and Bob (or Quinten) need to share 
a reference frame in order to be able to verify entan- 
glement. Indeed, even if Quinten really uses on Bob's 
side the POVM Gj — UGjU^ for some unknown, but 
fixed unitary operator U acting on Bob's quantum sys- 
tem, the observation that j ^ijPij < still verifies 
entanglement. Namely, in that case this observation cor- 
responds to Tr(/ (g) U pi ® U'^W) < 0, so that he verified 
the entanglement of the state I ® U pi ® U'^ . The latter 
state is manifestly connected via a local operation to the 
original state and, therefore, entanglement of one state 
implies the entanglement of the other. This observation 
can be generalized to POVMs related by LOCC (local 
operations plus classical communication) maps (rather 
than unitaries), so that indeed only partial control over 
the measurement POVMs is required. 



Moreover, an entanglement witness does not neces- 
sarily make use of all POVM elements of the measure- 
ment, therefore trivially allowing the use of local filtering. 
This includes conditioning on the detection of photons, 
as discussed in the preceding Section. Known and well- 
characterized imperfections such as dark counts and de- 
tection inefficiencies in Quinten's devices can be directly 
included in the description of the measurement POVM. 

In actual experiments it is crucial not to make (explicit 
or hidden) assumptions about the relevant Hilbert space. 
For example, in quantum optical implementations one 
uses often single-photon avalanche detectors that moni- 
tor many spatio-temporal modes. These detectors can- 
not discriminate from which mode the photon has been 
drawn that triggered the detection event, or whether the 
event was triggered by one or many photons. While the 
issue of many spatio-temporal modes can be easily dealt 
with due to the simple overall structure of the POVM 
(or by a local filtering operation: measuring but subse- 
quently forgetting from which mode a detected photon 
arose is a local operation), it is in general much harder 
to analyze carefully multi-photon events. 

Entanglement witnesses are being evaluated using the 
joint probability distribution for the measurement out- 
comes of both subsystems A and B. In a way, this joint 
probability distribution summarizes everything Quinten 
knows about the quantum state. That is, his assign- 
ment of the form (|4]) takes into account all correlations 
he measured. If the data actually arise from Quinten 
performing some other entanglement verification proto- 
col, then we know that the results can always be used 
to evaluate entanglement witnesses as well. Thus, when- 
ever some protocol tells Quinten there is entanglement, 
he can also construct a witness from the same data that 
reveals entanglement. Especially those verification meth- 
ods with criteria that are linear in the density matrix can 
be rephrased directly as an entanglement witness. An ob- 
vious example and a not-so-obvious example follow here. 

Conversely, the data obtained in a measurement of an 
entanglement witness can be used to give a lower bound 
on the amount of entanglement. Namely, one can search 
for states with the minimum amount of entanglement (for 
one's favorite measure of entanglement) consistent with 
the data. Thus an entanglement witness can be used both 
as a qualitative test and as a quantitative measurement of 
entanglement. This is discussed in various recent papers 
62, 63, 64]. 

Finally, note that if there is no witness to verify 
entanglement, all other verification methods must fail, 
too. In this sense, entanglement witnesses represent the 
strongest methods of entanglement verification. 



A. Relation to Bell inequalities 

A Bell inequality test can be related to an entangle- 
ment witness (65l . l66j , as the Bell inequality can be ex- 
pressed as the expectation value of a suitable operator. 



12 



When one does that, one finds typically that the witness 
operator thus constructed is not optimal: there are bet- 
ter witnesses that detect all states detected by the Bell 
inequality tests, and more. This again shows that de- 
tecting entanglement is an easier task than refuting local 
realism. 

Note that the Bell witness can be evaluated via a 
POVM description of the measurements, which may in- 
clude a passive probabilistic choise of measurement set- 
tings. This is fine for Quinten, but for Rhiannon such a 
passive detection set-up is not sufficient: she necessarily 
requires the active choice of different settings. 



B. Relation to teleportation 

It is interesting to make the connection between en- 
tanglement witnesses and the teleportation Criteria of 
Section [mi To summarize that procedure, Quinten tele- 
ports signals that are drawn at random out of a specified 
set of states with a specified a priori probabilities. Then 
he performs measurements on Bob's site, so that for the 
sub-ensemble of each signal, he can evaluate the fidelity of 
the teleportated state. By comparison to classical limits 
to the average fidelity for all states, Quinten then con- 
cludes that the teleportation actually must have made 
use of a quantum resource, which in this case means that 
the bi-partite state in teleportation must have been en- 
tangled. A different way of saying the same thing is that 
Quinten infers from his data that the quantum channel, 
which is realized by the teleportation protocol, is not en- 
tanglement breaking. 

We can rephrase this whole procedure as a special case 
of entanglement witnesses. After all, if Quinten chooses 
an input state and performs a Bell measurement on this 
chosen state and Alice's half of the possibly entangled 
state, then he performs an effective POVM on Alice's 
state (this trick was used in ^58^ to connect teleportation 
to Bell inequality tests). On Bob's side, Quinten also per- 
forms some measurement that allows him to reconstruct 
the conditional states so that he can calculate the over- 
lap between input and output state. So the basic data 
material from the teleportation test can be interpreted as 
the measurement of some entanglement witness. Indeed, 
comparing the average fidelity with the optimal classical 
fidelity can be formulated as a particular linear witness. 
Since there is no reason for the teleportation fidelity to 
be an optimal witness, it generally does mean that just 
calculating the average fidelity might not allow the ver- 
ification of entanglement, while a more general entan- 
glement witness, constructed from the same data, would 
do. That is, the same data that yield a fidelity below the 
limit needed to infer entanglement, may be combined in 
a different way to demonstrate entanglement. 

Combining this picture of teleportation as an entan- 
glement witness with the remarks made above about in- 
cluding local filtering operations shows that conditional 
teleportation is allowed as an entanglement verification 



protocol. The conditioning can be seen as a local filtering 
operation. 

VII. DIRECT MEASUREMENT OF 
ENTANGLEMENT 

All methods for entanglement verification discussed so 
far are indirect: they either allow Quinten to infer about 
the existence of entanglement by detecting some other 
property that requires entanglement, or they allow him 
to reconstruct (the relevant part of) a density matrix 
that in turns allows him to quantify the amount of en- 
tanglement. However, there are dzrec< measurements that 
measure the entanglement (either quantitatively or qual- 
itatively) without measuring much more. Moreover, such 
measurements allow one to detect all entangled states, in 
contrast to a fixed entanglement witness, who can de- 
tect only certain entangled states. Such measurements 
require multiple copies of the same density matrix, en- 
tanglement being a nonlinear function of p. 

For example, Quinten may apply the method of (29j 
to detect entanglement by performing suitable measure- 
ments on four copies of Alice's and Bob's states. How- 
ever, it is not sufficient to have Alice and Bob create just 
four copies. Alice and Bob could cheat then, if they know 
Quinten is going to apply that particular method, by 
preparing an unentangled 4-qubit state with appropriate 
properties with respect to the observables Quinten will 
measure. The reason that trick works is that Quinten 
would wrongly assume the form ([5]) for the state of the 
four copies. So, as explained in Section|TTl what he should 
do instead is let Alice and Bob create many (i.e. many 
more than four) copies; then choose randomly groups of 
four copies (including a random order within the group) ; 
and perform his various measurements on those groups 
of four in some random order. Finally, he should check 
that deleting random subsets of data do not change his 
results. All this does imply the direct measurement is, in 
practice, not as good a method as it may seem: one needs 
to generate many copies at the same time, whereas, e.g., 
tomography can be done on sequentially produced copies 
of the (entangled) state. 

The method of [l^ tells Quinten whether there is en- 
tanglement or not, but the method does not quantify 
it. For that (more lofty) purpose, Quinten can apply 
the method discussed in [30|: he will have to perform 
measurements on twenty copies, and estimate the four 
eigenvalues Ai . . . A4 (in nonincreasing order) of the non- 
hermitian matrix pp, where 

P — ay ® ayP* (Jy ® ffy, (l4) 

where p* denotes the complex conjugate of p in the stan- 
dard basis. The eigenvalues together determine the con- 
currence of one copy of Alice's and Bob's state through 

M 

C(p) = max(0, Va7-v^-V^-VaI). (15) 
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But just as in the preceding example, Quinten does have 
to be careful as the method of [30|] relies on all twenty 
copies being in the same state. Just as before, he should 
take a large number of copies generated by Alice and Bob, 
and choose random subsets of twenty copies, and then 
perform the measurements of (30l | in some random order. 
That will give him a correct estimate of the amount of 
entanglement, provided, again, the random deletion of 
subsets of data does not change his quantitative estimate 
of entanglement (within experimental error, of course). 

A possible improvement over the method of [30l | is 
described in jsij . in which circuits are constructed for 
measuring the concurrence directly, again using multi- 
ple copies. We note that those circuits are not complete 
and must be supplemented by random permutations of 
the input states in order to turn the measurement into a 
valid entanglement-verification protocol. 

Finally, let us discuss an example of how violating 
the Criteria leads one to overestimate entanglement even 
with the direct measurement methods. In Ref. 32j an 
experiment is described where the concurrence of an en- 
tangled state is estimated using a direct measurement of 
entanglement in a particularly simple way. The method 
relies on having two copies of the same pure state. This is 
obviously a much stronger condition than assuming the 
state to be of the form (O. Indeed, if Quinten would 
assume the general De Finetti form including mixed 
states — and Quinten is never allowed to assume more 
than that — the method of [32I] fails (for details see [68l|). 
We also note that, according to a finite set of mea- 
surements never should lead to a pure-state assignment. 
An indication that the procedure of [13] relies on an 
overtly strong assumption is that all measurements take 
place entirely on Alice's side. 

More precisely, the method of [32| is based on the fol- 
lowing (correct) theoretical result [63]: «/ two bipartite 
states are pure and identical, then the concurrence of a 
single copy of the state is given by 



C 



(16) 



where denotes the probability to project the two 
qubits on Alice's side onto the antisymmetric subspace. 
The experiment now assumes the source generates two 
identical copies, measures on Alice's particle only, 
and concludes that maximal entanglement has been gen- 
erated from the observation that P^ = 1/4. However, 
if Alice creates the completely mixed state pA = 1/2 on 
her side instead, one will also find that P^^ = 1/4. 

A further problem is that in the experimental setup 
of Ref. [3^ the joint measurements can only be done on 
specific pairs of systems. It is clear, in that case, that 
Alice and Bob can fool a Quinten using this method into 
believing they share maximal entanglement by yet an- 
other procedure: Alice can create pairs of particles, 1/4 
of them in the singlet state, the remaining 3/4 can be in 
randomly chosen product states 10)]0) or 11)11). The im- 
proved method ^7Q] of measuring Pa both on Alice's and 



Bob's side and verifying the correlations between these 
two measurements would succumb to the same cheating 
method in the experiment. Whenever Alice creates a sin- 
glet state on her side. Bob does the same on his side. 

Unfortunately, a very recent paper [7l| follows essen- 
tially the same argumentation of [S^] , by proposing a di- 
rect measurement of entanglement on just Alice's system 
that, again, relies on assuming pure states. Obviously, 
measurements on Alice's system only, no matter what 
observables one measures, can never tell one anything 
about entanglement, as the maximally entangled state is 
then indistinguishable from the completely mixed state. 
All these proposed methods are simple only because the 
missing part of the proof of entanglement, namely that 
one's source produces identical pure states, is the most 
difficult. 

This version of the direct measurement method is 
somewhat similar to the (incorrect) protocol 6 we men- 
tioned in the Introduction, consistency with entangle- 
ment. To illustrate this with a simple example, suppose 
we assume we create a pure entangled state of the form 



sin6ilO)ll) cos 6111)10), 



(17) 



where is a control parameter. Then we might think 
we directly measure entanglement if we just estimate the 
probability of finding system A in state 10) or Jl). Af- 
ter all, that measurement determines sin^ 9 and thereby 
the entanglement in the state P7)l . But, it should be 
clear this measurement in fact only checks for consis- 
tency with the state assignment ([T7| without verifying 
or demonstrating entanglement. Demonstrating entan- 
glement would require one to verify the form (|17p. 



VIII. DISCUSSION 

We have now discussed many different ways to verify 
entanglement. We distinguished between protocols that 
eliminate all possible local hidden-variable models from 
those protocols that accept quantum mechanics as a valid 
description of Nature and infer entanglement. We argued 
that the latter protocols are sufficient for entanglement 
verification. In particular, an important distinction is 
that closing loopholes is not important for entanglement 
verfication, no matter how crucial it is for refuting local 
realistic hidden-variable models. 

On the other hand, we argued that an entanglement 
verification protocol should not put any trust in the en- 
tanglement generation procedure. After all, if one would 
completely trust the generation procedure there would 
be no need for entanglement verification. In order to set 
a sharp boundary we proposed to pretend the entangled 
states one tries to verify were handed over by untrusted 
parties. 

We discussed three different fiavors of entanglement. 
The distinction we made between the three different 
types is relevant for our discussions, as confusing one type 
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for another has often lead to incorrect interpretations of 
the results of entanglement verification protocols. 

We discussed a number of different entanglement- 
verification protocols: teleportation, violating Bell- 
CHSH inequalities, quantum state tomography, entan- 
glement witnesses, and direct measurements of entangle- 
ment. Let us give an interpretation of some of these pro- 
cedures. Generally speaking, a successful entanglement 
verification protocol teaches one the following: if one's 
source produced many instances of the state that was 
tested and verified, then the remaining untested states 
are guaranteed to possess entanglement. This is true 
provided the remaining states form a random subset of 
all states generated by the source. However, in all of 
the entanglement-verification protocols we discussed, ex- 
cept full quantum-state tomography, the state itself is 
still not completely known. This is true for direct mea- 
surements, it is true for entanglement witnesses, and 
it is true for Bell-CHSH inequality tests. For the lat- 
ter, it in fact tends to be a great advantage that all 
one needs is strong correlations between certain mea- 
surement outcomes, without knowing what actually was 
measured, and without knowing much about the Hilbert 
space structure of the system. But it does imply one will 
not know what quantum state to assign to the remaining 
untested copies. 

All this means in particular that the remaining 
untested states may not be used yet for, e.g., telepor- 
tation. Similarly, although certain entanglement verifi- 
cation protocols allow one to use the untested states for 
quantum key distribution — measuring entanglement wit- 
nesses of an appropriate form in particular — others do 



not. Thus, if one wishes to use entanglement for telepor- 
tation, then one could certainly first perform, say, the 
direct measurements discussed in Section I VIII to deter- 
mine first if there is in fact entanglement. However, one 
still has to follow up with more refined measurements, 
e.g., tomographic measurements, to narrow down one's 
possible state assignment. This does lose some of the ad- 
vantage of the direct measurement methods. Both quan- 
tum key distribution and teleportation as entanglement 
verification protocols have the advantage, in this context, 
that the protocol itself performs some useful task while 
verifiying the presence of entanglement at the same time. 

Finally, we identified many pitfalls associated with en- 
tanglement verification and quantification. We formu- 
lated five Criteria that, we think, should be applied 
to any experimental entanglement verification protocol. 
This, we hope, will help in unifying the language used for 
describing the different types of entanglement that can 
be created in a large variety of physical systems. That 
should also make it easier to compare in a consistent 
fashion and operationally useful way the various types of 
entanglement created in experiments. 
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